[NIFI-8990] Upgrade Groovy to 2.5.14 and 2.4.21

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.15.0
• Component/s: Core Framework, Extensions, NiFi Registry, Tools and Build
• Labels: security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 03/Aug/21 12:46
• Updated: 05/Aug/21 21:31
• Resolved: 05/Aug/21 21:31

Description

Groovy versions 2.5.13 and 2.4.20 and have a vulnerability related to directory creation in extension methods as described in CVE-2020-17521. Groovy 2.5.14 and 2.4.21 address this problem as well as other vulnerabilities in earlier versions.

Issue Links

• links to: GitHub Pull Request #5276
• links to: GitHub Pull Request #5284